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Amended claims 

1. (Currently Amended) A system employed by a first application for 
supporting concurrent operation of a plurality of network compatible applications, 
comprising: 

an entitlement processor for authorizing user access to said first 
application in response to validation of user identification information; and 

a communication processor for communicating a session initiation 
roqucst to a managing application to initiate initiating generation of^ 

a session Identifier particular to a user itiitiated session and for 
use by a plurality of concurrently operating applications to uniquely identify said user 
initiated sessio n and 

an encryption key for use by said first application in encrypting 
personal record parameters_conyeyed inJJRL.data^ 

in response to validation of user identification 

information. 

2. (Currently Amended) A system according to claim 1, wherein 

said personal record parameters are associated with a patient medical 

record and 

said se ssion initiation r e qu e st to s aid managing application - olso 
initiat e s g e neration of an encryption key is particular to said user initiated session fef 
uso by said firGt application . 

3. (Currently Amended) A system according to claim 2, wherein 

said encryption key is for common use by said plurality of concurrently 
operating applications in encrypting data associated with a personal record in data 
fields of a URL string , 

4. (Currently Amended) A system according to claim 1, wherein 

said communication processor also communicates additional 
parameters to said ^ managing application for storage, said addidonal parameters 
including one or more of, (a) an authentication service identifier, (b) a language 
identifier, (c) a ttserid URL to direct a browser to a starting aT>plication upon 
termination of a session , (d) a URL for use in acquiring a web page providing a logon 
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menu to support user initiation of another session, (e) a URL to be contacted upon a 
predetermined event and (f) an identification of a type of said predetermined event. 

5. (Original) A system according to claim 1, including 

an input processor for receiving said session identifier and an 
associated encryption key from said managing application. 

6. (Currently Amended) A system according to claim 5, including 

an encryption processor for use in encrypting medical d ata associated 
with a poroonal patientmedical record. 

7. (Currently Amended) A system employed by a managing application 
for supporting concurrent operation of a plurality of network compatible applications, 
comprising: 

an input processor for receiving from a first application a session 
initiation request to initiate generation of a session identifier; 

a session identifier generator for generating a session identifier 
particular to a user initiated session and for use by a plurality of concuncndy 
operating applications to uniquely identify said user initiated session; 

an encryption key generator for generating an encryption key for use by 
said first application in encrypting pci-sonal record parameters conveyed in URL data 
and 

a communication processor for, 

communicating said session identifier to said first application 

and 

communicating said session identifier to another application of 
said plurality of concurrently operating applications in response to a request to receive 
said generated session identifier. 

8» (Currently Amended) A system according to claim 7» including 

wherein 

m said encryption key generator for subalontidly randomly generating 
generates an encryption key particular to said user initiated session, in response to 
said session initiation request. 

9. (Currcntiy Amended) A system according to claim 8, wherein 
said encryption key is for common use by said plurality of concurrentiy 
operating applications in encrypting data associated with a personal record. 
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10. (Currently Amended) A - system ticcording to clExim 7, 

A system employed bv a managing application for supportinp 
concurrent OT>eration of a nluralicv of network conn^atible applications, comprising: 

an input proccsspi: for J^ce;vins from a first application a session 
initiation request to initiate generation of a session identifier: 

a session identifier generator for generating a session identifier 
particular to a user initiated session and for use by a plurality of concurrently 
operating applications to uniquely identify said user initiated session: and 

a communication processor for, 

communicating said session identifier to said first application 

and 

communicating said session identifier to another application of 
said plurality of concurrently operating applications in response to a request to receive 
said generated session identifier wherein 

said communication processor includes said generated session 
identifier in different types of command messages communicated to applications of 
said plurality of concurrently operating applications. 

1 L (Currently Amended) A system supporting concurrent operation of 
a plurality of Internet compatible applicationSt comprising: 

a browser application providing a user interface display permitting user 
entry of identification information and commands for a plurality of Internet 
compatible applications and for providing user identification Information to a first 
application for validation; and 

a managing application for generating^ 

a session identifier particular to a user initiated sessio n and 
an encryption_key_for.use_by_said first application in encrypting 
personal yecord pararpctcrs coTivc^Y^d jn VRL <^ata, in response to receiving a session 
Initiation request from a first application and for communicating said session 
identifier to said first application. 

12- (Currentiy Amended) A system according to claim 11, wherein 
said managing application al s o communicates to said first application 
data itomo including ono or moro of^ (a) a encryption key is also to be used in 
encrypting and decrypting a session identifier conveyed in URL dat a, (b) on indicator 
id e ntifying whether or not a ser . fiion initiation r e quor » t io f.uccoGflful > 
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13, (Currently Amended) A system according to claim 11» wherein 
said managing application includes 

ft» said encryption key generator for substantially randomly gen e rating 
generates an encryption key particular to said user initiated session, in response to 
said session initiation request 

14, (Original) A system according to claim 13t wherein 

said encryption key is for conmion use by said plurality of concurrently 
operating applications in encrypting data associated with a personal record. 

15. (Currently Amended) A GyDtom - oooording to claim 11, 

A system supporting concurrent operation of a plurality of Tntemet 
con>patible appUc^tiff^O^t <?QmPnsins; 

a browser application providing a user interface display permitting user 
entry of identification information and commands for a plurality of Tntemet 
compatible applications and for providing user identification information to a first 
a pplication for validation: and 

a managing application for generating^ 

a session identifier particular to a user initiated session in 
response to receiving a session initiation request from a first application and for 
communicating said session identifier to said first application wherein 

said managing application includes said generated session identifier in 
different types of coimnand messages communicated to applications of said plurality 
of concurrentiy operating applications. 

16. (Currently Amended) A method employed by a first application 
operating in a system supporting concurrent operation of a plurality of Internet 
compatible applications, said method comprising the fit^s activities of: 

authorizing user access to said first application in response to 
validation of user identification information; and 

communicating a fiesfiton inttiadon-requ e st - to q managing application 
to initiato initiating generation of, 

a session identifier particular to a user initiated session and 
ap encryption ^ey for use by said fir^l; t^pplication in enciTYPtins 
personal record parameters coniyeved in URL data, in response to validation of user 
identification information. 
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1 7. (Currently Amended) A method employed by a managing 
application for supporting concurrent operation of a plurality of network compatible 
applications, comprising the stops activities o f: 

receiving from a fErst application a session initiation request to initiate 
generation of a session identifier; 

generating a session identifier particular to a user initiated session and 
for use by a plurality of concurrently operating applications to uniquely identify said 
user initiated session; 

generating an encryption key for use bv said first apolicatton in 
encrypting personal record parameters conveyed in URL data: and 

communicating said session identifier and said encryption kev to said 
first application and to another application of said plurality of concurrendy operating 
applications in response to a request to receive said generated session identifier. 

18. (New) A tangible storage medium incorporating machine readable 
instrucdons for performing the activides of claim 17. 

19. (New) A tangible storage medium incorporating machine readable 
instructions for performing the activides of claim 18. 
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